Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: zzTxQNhBrO0JN0WoxUEOVN5FAiOysR4w3nPTqtZaEoI=
Subject key identifier: D3:A6:3D:E6:25:EF:11:D8:C6:13:03:6C:C0:E9:3B:0B:70:15:3B:81
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019A4F99020A442950EA4FD05A9D628F8F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:18 +0000
Manifest this update: Tue 04 Nov 2025 16:00:18 +0000
Manifest next update: Wed 05 Nov 2025 16:00:18 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: NwEEQ5wgMOSS+DenEzd+08GREXStAK0gvLDWU06gFck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:02:0a:44:29:50:ea:4f:d0:5a:9d:62:8f:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Nov 4 16:00:18 2025 GMT
Not After : Nov 5 16:00:18 2025 GMT
Subject: CN=d3a63de625ef11d8c613036cc0e93b0b70153b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:a4:95:71:03:65:a6:ee:2b:99:1a:df:16:
38:47:e2:57:86:86:44:2a:9c:5c:75:d4:ad:9d:02:
49:36:8d:53:b5:36:18:67:06:86:32:c1:9f:3a:21:
23:c5:37:a5:46:33:09:9d:c0:91:5e:cd:8a:68:2b:
01:f5:2a:26:5c:c7:92:e2:9c:57:9e:5e:3a:af:f5:
94:c6:93:2b:df:b6:8a:9d:ea:11:d4:c3:5c:04:db:
e1:b1:c3:09:8d:e5:f2:c0:c1:53:b2:3c:03:28:76:
26:4f:a4:b3:5d:58:ca:12:1d:1f:85:7e:ff:f4:0b:
98:4b:70:60:3c:7f:25:cb:47:84:31:ae:e2:12:94:
cd:a1:fa:33:89:b4:ab:92:34:e0:df:f1:7f:38:5a:
fe:c0:bb:b2:90:89:e0:83:71:a0:f3:ea:5e:4f:1a:
a3:2d:75:87:71:08:ee:a2:1b:8d:ab:9c:4e:93:2a:
f9:11:f5:d8:c7:6c:8f:51:d7:7d:82:b6:a9:9d:85:
34:c3:37:8a:a6:f2:e0:1b:bf:8f:04:ac:72:b0:89:
7e:fa:fa:fa:28:19:b7:56:1c:ad:6a:c2:6b:30:35:
56:35:db:5b:b2:ba:44:85:bf:0f:c6:bd:8c:53:4b:
88:f3:50:51:8b:9f:72:f2:98:35:8e:7b:4a:97:e4:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:3D:E6:25:EF:11:D8:C6:13:03:6C:C0:E9:3B:0B:70:15:3B:81
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4f:dd:1c:99:56:54:ee:56:85:4d:43:99:73:14:35:c4:04:
64:2c:29:60:02:93:38:51:e3:6f:34:8c:90:4a:63:bb:a2:62:
a2:98:6e:a7:8c:a3:ee:a0:fa:5a:34:14:31:6f:4e:78:ae:71:
f1:ef:f1:64:18:3f:12:c8:69:33:9d:41:22:39:aa:db:67:20:
44:a5:b7:85:88:0e:5b:a2:7e:5d:9e:fd:e8:68:93:12:d4:58:
99:d4:1e:1d:8a:39:7e:cb:96:f3:dd:57:3a:68:f9:47:8b:70:
aa:ef:3c:1a:f7:48:21:11:fa:ad:43:6e:29:12:96:9e:42:95:
82:8c:09:3b:36:ae:8c:6f:f5:61:b1:14:2b:1d:81:a5:1b:da:
10:6a:0a:23:96:33:52:7a:7b:c0:ab:09:01:2c:13:68:5f:70:
4b:a9:37:b3:72:e9:fe:6d:a9:f3:50:ca:2a:c7:67:dd:cd:b9:
23:41:5e:82:73:94:2b:4e:64:54:a5:9d:a8:f4:e8:6b:9a:d5:
f6:38:b9:6b:d0:5d:fe:dc:40:f9:9e:12:c6:f3:85:1d:d3:e0:
68:87:5d:c3:46:f2:c4:bc:62:8d:55:c9:7d:b7:62:6b:01:30:
e2:6e:45:8c:48:6c:35:3d:b2:7e:22:1c:12:b4:d2:42:85:7e:
17:f8:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:37 2025 by rpki-client